Skill UI

This skill guides users on setting up automated code quality gates directly at the Git level. It covers best practices using frameworks like Husky, lint-staged, and pre-commit. Users can enforce linting, formatting, type-checking, and standardized commit message conventions (e.g., Conventional Commits) before code is committed or pushed, significantly improving code hygiene and development workflow consistency.

A comprehensive master guide for developers looking to embed interactive 3D scenes created in Spline.design into modern web projects. It provides specific integration methods for various frameworks, including React, Next.js, Vue, and vanilla JavaScript, ensuring optimal performance and runtime control for stunning UI/UX experiences.

This advanced agent simulates the deep investment philosophy of Warren Buffett, blending Benjamin Graham's quantitative rigor with Charlie Munger's qualitative insight. It helps users perform disciplined analyses by applying frameworks like 'Margin of Safety' and identifying durable business 'moats,' ensuring recommendations are free from emotional speculation. Ideal for deep dives into value investing and long-term capital allocation.

A comprehensive guide for defining, tracking, and interpreting product metrics across all stages—from discovery to maturity. This skill covers selecting metric frameworks (AARRR, HEART), defining stage-appropriate KPIs, designing multi-layered dashboards, and executing deep analyses like cohort and retention modeling. It helps teams transform raw data into actionable product strategies, moving beyond vanity metrics.

Systematically evaluates cyber-campaign evidence to attribute a cyber operation to a specific threat actor. This skill utilizes advanced analytical frameworks like the Diamond Model and Analysis of Competing Hypotheses (ACH) to weigh multiple indicators, including infrastructure overlaps, TTP consistency, malware similarity, and operational patterns, providing confidence-weighted attribution assessments for incident response.

A comprehensive guide and set of scripts to systematically audit AWS S3 buckets for security misconfigurations. This tool identifies publicly exposed data, overly permissive ACLs, inadequate bucket policies, and missing encryption settings, ensuring adherence to least-privilege principles and compliance frameworks like SOC 2 or HIPAA.

A comprehensive, structured playbook for Security Operations Centers (SOCs) detailing the entire lifecycle of ransomware incidents. It guides analysts through detection (SIEM queries), triage decision trees, containment (EDR/Firewall), evidence collection, and recovery phases, adhering to NIST CSF and MITRE ATT&CK frameworks.

This system provides a structured workflow for tracking security vulnerability exceptions and formally accepting related risks. It mandates documentation of compensating controls, manages required approval chains, and automatically handles expiration based on defined Service Level Agreements (SLAs). Essential for maintaining compliance and visibility into accepted risks, supporting frameworks like PCI DSS, SOC 2, and NIST CSF.

This skill fetches the latest, live documentation and code examples for specific libraries and frameworks (e.g., Next.js, React, Prisma). Instead of relying on static or outdated training data, it utilizes the Context7 MCP to provide accurate, up-to-date answers for setup questions, API references, and code generation based on current best practices.

A proactive, hypothesis-driven skill designed to hunt for Advanced Persistent Threats (APT) within complex enterprise environments. It analyzes endpoint telemetry, network logs, and memory artifacts using frameworks like MITRE ATT&CK. Use this skill when investigating anomalous behavior flagged by UEBA, conducting scheduled threat sprints, or validating exposure to known TTPs using tools like Velociraptor and osquery.

This guide details the systematic process for reviewing high-privilege accounts, including Domain Admins, cloud IAM roles, and service accounts. It is a critical identity governance function designed to validate that users only retain the access they absolutely require, thereby enforcing the principle of least privilege. This review is mandatory for compliance frameworks like SOC 2, PCI DSS, and HIPAA, and involves discovery, validation, remediation, and continuous monitoring.

Provides a structured workflow for performing initial triage of security incidents. This process uses established frameworks (NIST SP 800-61r3 and SANS PICERL) to classify the incident type, assign severity based on business impact, and determine the necessary containment and escalation steps. Ideal for analyzing SIEM/EDR alerts, suspicious user reports, or matching threat intelligence.